Privacy policy

1. What we collect

Account data

Your email, the name you enter, a hashed password (we never see the real one), your language and time zone, and when you accepted this policy. If you sign in with Google we also store your Google account reference.

Data you create

Tanks, fish, schedules, completed-task records, water logs, uploaded photos, and any community content you post (questions, answers, comments, diaries).

Technical data

Your IP address and sign-in times, kept only to stop password guessing and abuse, plus a log of whether each notification was delivered.

We do not store card details, do not track you across other websites, and run no third-party advertising or analytics scripts.

2. Why we use it

legal.privacy.why.body

• To provide the service you asked for — remembering your schedule and sending reminders on time.
• To sign you in and keep your account secure.
• To contact you about your account, such as email verification or a password reset.
• To keep public content free of spam and abuse.

The legal bases are performance of our agreement with you, and the consent you gave when you signed up.

3. Who we share it with

We do not sell your data, and share it only where the service requires it.

• ntfy — only if you turn it on. Reminder messages go to the server and topic you enter, and contain your tank name, task name and time. Note that ntfy topics are public names: anyone who knows the topic can read its messages, so use a long random one.
• Our email provider — used to send verification and password reset messages.
• Our hosting provider — where the database and files live.
• Government authorities — only under a lawful order.

4. What other people can see

Most of the system is private to you: your tanks, fish, schedules and water logs. Only what you deliberately publish is visible to others.

• Questions and answers on the Q&A board are readable by everyone, including people without an account.
• Diaries are always private until you switch one to public yourself. When you do, every entry and photo in that diary becomes visible to everyone.
• Your profile page is off by default, and your email address is never shown publicly under any setting.
• Uploaded photos have their EXIF data stripped automatically, including the GPS location that phone cameras embed.

5. How long we keep it

• Account data and the data you create are kept for as long as your account is active.
• When you delete your account, notifications stop immediately and everything is permanently deleted within 30 days.
• Notification delivery logs are kept for 180 days so problems can be traced.
• Questions, answers and comments you posted publicly remain after account deletion but no longer show your name, because those answers are useful to people who read them later. Diaries are deleted in full, because they are personal to you.

6. Your rights

Under the PDPA you have the following rights, and you can exercise most of them yourself under Settings → Account.

• Access and obtain a copy of your data — export it yourself at any time as a complete JSON file.
• Correct inaccurate data — edit it yourself in settings.
• Erase your data — delete your account yourself.
• Withdraw consent, object to processing, or ask us to restrict it.
• Complain to the Personal Data Protection Committee if you believe we have handled your data wrongly.

7. Cookies

We use only the cookies the site needs to work. There are no advertising or tracking cookies.

• Session cookie — remembers that you are signed in; expires when you sign out.
• Language cookie — remembers whether you chose Thai or English; kept for one year.

8. Security

Passwords are hashed with a standard algorithm before being stored, connections are forced to HTTPS, sign-in links expire and work only once, and sign-in attempts are rate limited to stop password guessing. No system is perfectly secure, so using a password you do not reuse elsewhere still matters.

9. Children

This service is not designed for children under 13. Minors should have a guardian’s consent before using it.

10. Changes to this policy

If we make a material change to this policy we will announce it in the app before it takes effect.

11. Contact about your data

If you have a question about this policy, or want to exercise a right the system cannot handle automatically, use the contact details on the About page.